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Abstract. A set of multivariate polynomials, over a field of zero or large 
characteristic, can be tested for algebraic independence by the well-known Ja- 
cobian criterion. For fields of other characteristic p > 0, there is no analogous 
characterization known. In this paper we give the first such criterion. Essen- 
tially, it boils down to a non-degeneracy condition on a lift of the Jacobian 
polynomial over (an unramified extension of) the ring of p-adic integers. 

Our proof builds on the de Rham-Witt complex, which was invented by II- 
lusie (1979) for crystalline cohomology computations, and we deduce a natural 
generalization of the Jacobian. This new avatar we call the Witt-Jacobian. In 
essence, we show how to faithfully differentiate polynomials over ¥p (i.e. some- 
how avoid dxP/dx = 0) and thus capture algebraic independence. 

We apply the new criterion to put the problem of testing algebraic inde- 
pendence in the complexity class NP*^ (previously best was PSPACE). Also, 
we give a modest application to the problem of identity testing in algebraic 
complexity theory. 



1. Introduction 

Polynomials / = {/i, . . . , fm} C k[xi^ . . . , Xn] are called algebraically indepen- 
dent over a field k, if there is no nonzero F S k[yi, . . . ,ym] such that F{f) — 0. 
Otherwise, they are algebraically dependent and F is an annihilating polynomial. 
Algebraic independence is a fundamental concept in commutative algebra. It is 
to polynomial rings what linear independence is to vector spaces. Our paper is 
motivated by the computational aspects of this concept. 

A priori it is not clear whether, for given explicit polynomials, one can test 
algebraic independence effectively. But this is possible - by Grobner bases, or, by 
invoking Perron's degree bound on the annihilating polynomial |Per27j and finding 
a possible F. Now, can this be done efficiently (i.e. in polynomial time)? It can be 
seen that both the above algorithmic techniques take exponential time, though the 
latter gives a PSPACE algorithm. Hence, a different approach is needed for a faster 
algorithm, and here enters Jacobi |Jac41) . The Jacobian of the polynomials / is 
the matrix Jx{f) ■= {dx^fi)mxn, where d^-fi = dfi/dxj is the partial derivative 
of fi with respect to xj. It is easy to see that for to > n the / are dependent, so 
we always assume m < n. Now, the Jacobian criterion says: The matrix is of full 
rank over the function field iff / are algebraically independent (assuming zero or 
large characteristic, see |BMS11) ). Since the rank of this matrix can be computed 
by its randomized evaluations [SchSOi IDGWOQj , we immediately get a randomized 
polynomial time algorithm. The only question left is - What about the 'other' 
prime characteristic fields? In those situations nothing like the Jacobian criterion 
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was known. Here we propose the first such criterion that works for all prime 
characteristic. In this sense we make partial progress on the algebraic independence 
question for 'small fields' |DGW09] . but we do not yet know how to check this 
criterion in polynomial time. We do, however, improve the complexity of algebraic 
independence testing from PSPACE to NP*^. 

The m X m minors of the Jacobian we call Jacobian polynomials. So the cri- 
terion can be rephrased: One of the Jacobian polynomials is nonzero iff / are 
algebraically independent (assuming zero or large characteristic). We believe that 
finding a Jacobian-type polynomial that captures algebraic independence in any 
characteristic p > is a natural question in algebra and geometry. Further- 
more, Jacobian has recently found several applications in complexity theory - 
circuit lower bound proofs [Kal85, ASSS12\ pseudo-random objects construction 
|DGW09[|Dvi09j, identity testi ng ^BMSll, ASSS12, , cryptograph y |DGRVllj . pro- 
gram invariants |L'v84l[Kay09| , and control theory |For91[|DF92| . Thus, a suitably 
effective Jacobian-type criterion is desirable to make these applications work for 
any field. The criterion presented here is not yet effective enough, nevertheless, it 
is able to solve a modest case of identity testing that was left open in [BMSllj . 

In this paper, the new avatar of the Jacobian polynomial is called a Witt- 
Jacobian. For polynomials / = {/i,. •.,/«} C Fp[a;i, . . . , a;„] we simply lift the 
coefficients of / to the p-adic integers Zp, to get the lifted polynomials / C 
Zplxi, . . . , Xn]- Now, for i > 1, the ^-th Witt- Jacobian polynomial is WJP^ :— 
(/!••• /n)^*^ ^~^(a;i • • • Xn) ■ det Jx{f)- Hence, the Witt-Jacobian is just a suitably 
'scaled- up' version of the Jacobian polynomial over the integral domain Zp. E.g., 

if n = 1, /i = x\, then WJP^ = (2^1)^ ""'^(^^i) ' (p^i ^) = which is a nonzero 
p-adic polynomial. Thus, Witt-Jacobian avoids mapping x\ to zero. However, the 
flip side is that a lift of the polynomial /i = 0, say, /i = px\ gets mapped to 

WJPf = {px\Y ^^(2^1) ■ {p^x^^^) — p'^P which is also a nonzero p-adic 

polynomial. This shows that a Witt-Jacobian criterion cannot simply hinge on the 
zeroness of WJP^ but has to be much more subtle. Indeed, we show that the terms 
in WJP^ carry precise information about the algebraic independence of /. In par- 
ticular, in the two examples above, our Witt-Jacobian criterion checks whether the 
coefficient of the monomial x\ in WJP^ is divisible by p^ (which is true in the sec- 
ond example, but not in the first for ^ > 2) . It is the magic of abstract differentials 
that such a weird explicit property could be formulated at all, let alone proved. 

1.1. Main results. We need some notation to properly state the results. Denote 
by N. Let [n] := {!,... ,n}, and the set of all r-subsets of [n] be denoted by 
If / G the bold-notation a/ will be a short-hand for a^, i ^ I, and we 

write tti for a^^. Let k/¥p be an algebraic field extension, and W{k) be the ring 
of Witt vectors of k (W(fc) is just a 'nice' extension of Zp). Define the Fp-algebra 
A :— k[xn] and the p-adic-algebra B := W{k)[xn]- For a nonzero a € N" denote 
by Vp{a) the maximal v € N with p"\ai, i € [n]. Set Wp(0) :— 00. 

[Degeneracy] We call f ^ B degenerate if the coefficient of x" in / is divisible 
by p"p(")+i for aU a G N". For £ e N, / is called {I +1)- degenerate if the coefficient 
of a;" in / is divisible by pmi„{^p («),<?}+! f^^. ^ g p^". 

We could show for polynomials f^EA and their p-adic lifts E B, that 
if are algebraically dependent, then for any r variables Xj, I e ('"'), the p-adic 
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polynomial {Yij^i^j) ' det jTlrj (g^) is degenerate. This would have been a rather 
elegant criterion, if the converse did not fail (see Theorem |36| . Thus, we need to 
look at a more complicated polynomial (and use the graded version of degeneracy). 
[Witt-Jacobian polynomial] Let i €N, € B, and / G (^"1). We call 

WJP,+ij(g,) (51 • • • 9r f-'{U,ei ^i) ' det ^.,(g,) G B 
the {i + l)-th Witt-Jacobian polynomial of w.r.t. I. 

Theorem 1 (Witt-Jacobian criterion). Let f^^Ahe of degree at most 5 >\, and 
fix £ > [r logp S\ . Choose g^, G B such that Vi G [r] , fi = gi (mod pB) . 

Then, are algebraically independent over k if and only if there exists I G ('"') 
such that WJP^+i_/(g^) is not {£ + 1)- degenerate. 

li p > 6^, this theorem subsumes the Jacobian criterion (choose £ = 0). In 
computational situations we are given f^, G say, explicitly. Of course, we can 
efficiently lift them to g^, G B. But WJPf+i./(g'^) may have exponential sparsity 
(number of nonzero monomials), even for £ = 1. This makes it difficult to test the 
Witt-Jacobian polynomial efficiently for 2-degeneracy. While we improve the basic 
upper bound of PSPACE for this problem, there is some evidence that the general 
2-degeneracy problem is outside the polynomial hierarchy (Menl2j (Theorem 40). 

Theorem 2 (Upper bound). Given arithmetic circuits Cr computing in A, the 
problem of testing algebraic independence of polynomials Cr is in the class NP"^^. 

We are in a better shape when WJP£+i_/(fl'^) is relatively sparse, which happens, 
for instance, when have 'sub-logarithmic' sparsity. This case can be applied 
to the question of blackbox identity testing : We are given an arithmetic circuit 
C G Fp[a;„] via a blackbox, and we need to decide whether C = 0. Blackbox 
access means that we can only evaluate C over field extensions of ¥p. Hence, 
blackbox identity testing boils down to efficiently constructing a hitting-set H c¥p 
such that any nonzero C (in our circuit family) has an a G "H with C{a) ^ 0. 
Designing efficient hitting-sets is an outstanding open problem in complexity theory, 
see |SS95l ISaxOQl ISYTOl IASSS12j and the references therein. We apply the Witt- 
Jacobian criterion to the following case of identity testing. 

Theorem 3 (Hitting-set). Let £ A be s-sparse polynomials of degree < S, 
transcendence degree < r, and assume s,S,r > 1. Let C G k[y„^] such that the 
degree of C{ f^) is bounded by d. We can construct a (hitting-)set % dV^ in 
poly((nd)^ {5rsY^'')-time such that: IfC{f„,) ^ then 3a G (C(/„))(a) ^ 0. 

An interesting parameter setting is r = 0(1) and s — 0{\ogd/r^ \og{Srlogd)). 
In other words, we have an efficient hitting-set, when have constant transcen- 
dence degree and sub-logarithmic sparsity. This is new, though, for zero and large 
characteristic, a much better result is in |BMSllj (thanks to the classical Jacobian). 

1.2. Our approach. Here we sketch the ideas for proving Theorem [T] without 
going into the definitions and technicalities (those come later in plenty). The central 
tool in the proof is the de Rham-Witt complex which was invented by lUusie, for 
Fp-ringed topoi, in the seminal work [I1179j . While it is fundamental for several 
cohomology theories for schemes in characteristic p > (see the beautiful survey 
[11194) ). we focus here on its algebraic strengths only. We will see that it is just 
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the right machinery, though quite heavy, to churn a criterion. We hft a polynomial 
/ G A to a more 'geometric' ring W(A), via the Teichmuller lift [/]. This process is 
the same functor that builds Zp from Fp |Ser79j . The formalization of differentiation 
in this ring is by the W(A)-module of Kdhler differentials i^^j-^^ |Eis95| . Together 
with its exterior powers it provides a fully-fledged linear algebra structure, the de 
Rham complex fi^^^j. But this is all in zero characteristic and we have to do more 
to correctly extract the properties of ^ - which has characteristic p. 

The ring W(^) admits a natural filtration by ideals W(A) D p^W{A), so we 
have length-i Witt vectors Wi/{A) := W{A) / W{A). This fihration is inherited by 
^w(A)' ^^'-^ ^ suitable quotient defines the de Rham-Witt complexW^ fi^ of (A)- 
modules, and the de Rham-Witt pro-complex W, f2]4. This is still an abstractly 
defined object, but it can be explicitly realized as a subspace of the algebra B' 
Ui>o W(A:)[a;^ ] (a perfection of B). lUusie defined a subalgebra E'' C B' that is 
'almost' isomorphic to W{A), and could then identify a differential graded algebra 
E C ilg, such that a suitable quotient E^ E / Fil^ E realizes fl]^. 

To prove Theorem [l] we consider the Witt-Jacobian differential WJ^ := c?[/i] A 
• • • A d[fr] G We ri^. By studying the behavior of 57^ as we move from A to 
an extension ring, we show that WJ^ vanishes iff are algebraically dependent. 
The concept of etale extension is really useful here 'MilSO]. In our situation, it 
corresponds to a separable field extension. We try to 'force' separability, and here 
Perron-like Theorem |4] helps to bound £. Next, we realize WJ^ as an element of 
E^. It is here where the Witt-Jacobian polynomials WJP^./ appear and satisfy: 
WJf = iff its explicit version is in Fil^ E'' iff WJPej is -^-degenerate for all /. 

The idea in Theorem [2] is that, by the Witt-Jacobian criterion, the given poly- 
nomials are algebraically independent iff some WJP^+ij has some monomial x" 
whose coefficient is not divisible by p«""{i'p(")/}+i_ j^p machine can 'guess' / 
and a, while computing the coefficient is harder. We do the latter following an idea 
of |KSllj by evaluating the exponentially large sum in an interpolation formula us- 
ing a #P-oracle. In this part the isomorphism between W£+i(Fpt) and the handier 
Galois ring Ge+i,t |Rag69[ IWan03] allows to evaluate WJP^?+i,/. 

The main idea in Theorem [3] is that non- ^-degeneracy of WJP^.j is preserved un- 
der evaluation of the variables X[n]\i- This implies with [BMSlI, that algebraically 
independent can be made r-variate efficiently without affecting the zeroness of 
C{fj.). The existence of the claimed hitting-sets follows easily from |Sch80| . 

1.3. Organization. In Sj2]we introduce all necessary preliminaries about algebraic 



independence and transcendence degree (^2.1 ), derivations, differentials and the de 



Rham complex (j|2.2[), separability (^2.3), the ring of Witt vectors ([2.4) and the 



de Rham-Witt complex (^2.5 and [2.6). To warm up the concept of differentials 



we discuss the classical Jacobian criterion in a 'modern' language in ^ 



Our main results are contained in [j4j In [4T we define the Witt-Jacobian dif- 
ferential and prove the abstract Witt-Jacobian criterion, and in §4.2| we derive its 
explicit version Theorem[T] In fj5]and f|6]we prove Theorems [2] resp. [3] To save space 
we have skipped several worthy references and moved some proofs to Appendix [X] 

2. Preliminaries 

Unless stated otherwise, a ring in this paper is commutative with unity. For 
integers r < n, we write [r, n] := {r,r -\- 1, . . . , n}. 
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2.1. Algebraic independence and transcendence degree. Let fc be a field 
and let A be a fc-algebra. Elements a,, e A are called algebraically independent 
over k if F{ar) ^ for all nonzero polynomials F e ^[2/^]- For a subset S Q A, 
the transcendence degree of S over k is defined as trdegj.(5') := sup{#T| T C 
S finite and algebraically independent over fc}. For an integral domain A we have 
trdegj,(^) = tidegf.{Q{A)), where Q{A) denotes the quotient field of A. 

Now let k[x] — k[Xn] be a polynomial ring over k. We have the following 
effective criterion for testing algebraic independence, which is stronger than the 
classical Perron's bound |Per27) . We prove it in [A. 2 using |Kem961 Corollary 1.8]. 

Theorem 4 (Degree bound). Let k be a field, /„ G k[x] be algebraically indepen- 
dent, and set 5i := deg(/i) for i G [n]. Then [fc(a;„) : fc(/„)] < Si ■ ■ ■ Sn- 

2.2. Differentials and the de Rham complex. Let i? be a ring and let A be 
an i?-algebra. The module of Kdhler differentials of A over R, denoted by i^^/^, is 
the A-module generated by the set of symbols {da \ a ^ A] subject to the relations 

d{ra + sb) — r da + sdb (i?-linearity) , d{ab) — adb + bda (Leibniz rule) 

for all r,s £ R and a,b E A. The map d: A ^ ^a/r defined by a i— >■ da is an 
i?-derivation called the universal R-derivation of A. 

For r > 0, let f^^^^j := A'^ ^a//s ^le the r-th exterior power over A. The universal 
derivation d: A = ^^/j^ — > ^\/fi extends to the exterior derivative d"": i^^/^ — > 
^A/fl by d^{a dai A • • • A da^) — daAdai A • • • A dur for a, ai, . . . , G A. It satisfies 
d^^^ o d^ — and hence defines a complex of i?-modules 

^A/R ■ ^ A^ ^A/R ■ ■ ■ ^ ^A/R ~^ ^A/fl -> • • • 

called the de Rham complex of A over R. This complex also has an i?-algebra 
structure with the exterior product. The Kahler differentials satisfy the following 
properties, which make it convenient to study algebra extensions. 

Lemma 5 (Base change). Let R be a ring, let A and R' be R-algebras. Then 
A' :— R'®jiA is an R' -algebra and, for all r > 0, there is an A' -module isomorphism 
R'^fj.^^A/R ~^ ^A'/R' given by r' ®{daiA- ■ -Ador) i-^ {r'(E)l) d{l(E)ai)A- ■ ■Ad{l®ar). 

Lemma 6 (Localization). Let R be a ring, let A be an R-algebra and let B = S^^ A 
for some multiplicatively closed set S G A. Then there is a B-module isomorphism 
B®A ^^A/R. ~^ /R. ff^^'e^ byb® {dai A • • • A dor) ^ bdai A • • • A da^. The universal 
R-derivation d: B ^ ^s/_r satisfies d(s^^) = — s^^ ds for s G S*. 

For r = 1 these lemmas are proved in ^is95 as Propositions 16.4 and 16.9, 
respectively, and for r > 2 they follow from [Eis95, Proposition A2.2 b]. 
The Jacobian emerges quite naturally in this setting. 

Definition 7. The Jacobian differential of E A is defined as ^A/Ri'^r) '■— 
dai A ■ ■ ■ A dor G i^^/^- 

Now consider the polynomial ring k[x]. Then ^l.[^yf. is a free fc[a;]-module of 
rank n with basis dxi, . . . , dx„. It follows that f^^j^,]//, ~ for r > n. For r < n 

and I = {ji < ■ ■ ■ < jr} & i^^r)' notation Ajg / ^^j ■— ^^ji A • • • A dxj^. 

The fc[a;]-module ^1^^^^^ is free of rank (") with basis {Aj^idxj \ I G (^"1)}. The 
derivation d: k[x] ^l[^yk is given by / YJ^=ii.dxif)dxi. 
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The Jacobian matrix of /,„ e k[x] is Jx{fm) {9xjfi)i.j G /c[a:]'"^". For 
an index set / — {ji < ■ ■ ■ < jr} G write Xj {xj-^, . . . ,Xj^) and 

'^xiifm) ■— {dxj^fi)i,k G fc[a;]™^'". A standard computation shows 

dfiA--- Adfr= det (/J • A^e/ da^i, 

where the sum runs over aU / G which imphes the following relationship 

between the Jacobian differential and the rank of the Jacobian matrix. 

Lemma 8. For G k[x] we have h[x]/k{fr) if and only ifrk^^) Jx{fr) = f- 

2.3. Separability. A univariate polynomial / G k[x] is called separable if it has no 
multiple roots in k. If / is irreducible, then it is separable if and only if d^f ^ 0, 
which is always the case in characteristic zero. If char(fc) = p > 0, then / is 
separable if and only if / ^ Now let L/k be a field extension. An algebraic 
element a & L over k is called separable if its minimal polynomial in k[x\ is separable. 
The separable elements form a field k C fcsep C L which is called the separable 
closure of k in L. Now let L/k be an algebraic extension. Then [L : A:]scp ■— [kgcp ■ k] 
resp. [L : fcjinscp := [L : fcsop] are called separable resp. inseparable degree of L/k. If 
L = fcscp, then L/k is called separable. The extension L/kgcp is purely inseparable, 
i.e. G fcscp for some e > 0, where p — char(/c). 

More generally a finitely generated extension L/k is separable if it has a tran- 
scendence basis B C L such that the finite extension L/k{B) is separable. In this 
case, B is called a separating transcendence basis of L/fc. If L/k is separable, then 
every generating system of L over k contains a separating transcendence basis. If 
k is perfect, then every finitely generated field extension of k is separable jLan841 
§X.6]. 

Lemma 16.15 in [Eis95| implies that a separable field extension adds no new 
linear relations in the differential module, and Proposition A2.2 b [loc.cit.] yields 

Lemma 9 (Separable extension). Let L/k be a separable algebraic field extension 
and let R be a subring of k. Then there is an L-vector space isomorphism L ®k 
il^^j^ ^L/_R, 9'i-'ven by b® {dai A • • • A dar) ^ bdai A • • • A dur- 

2.4. The ring of Witt vectors. The Witt ring was defined in |Wit36| . For its 
precise definition and basic properties we also refer to ILan84[ ISer79[ IHaz78| . 

Fix a prime p and a ring A. As a set, the ring W{A) of (p-typical) Witt vectors 
of A (or Witt ring for short) is defined as A^. An element a G W(A) is written 
(ao, fli, . . . ) and is called a Witt vector with coordinates ai G A. The ring structure 
of W{A) is given by universal polynomials Si, Pi G ^[xo, . . . ,Xi,yo, . . . ,yi] such that 

a + b= (5*0(00, feo), Si{ao, ai, feo, ^i), ■■■), ab = (Po(ao, &o), ^"1(00, ai, &o, h), ■■■) 
for all a, 6 G W{A). The first few terms are Sq = Xq + yo, Pq ^ x^yQ, 

Si =xi+yi - Er=i P~^(?)a;o2/c)~*' Pi =^oyi + xiyl + pxiyi. 

The additive and multiplicative identity elements of W{A) are (0,0,0,...) and 
(1, 0, 0, . . . ), respectively. The ring structure is uniquely determined by a universal 
property, which we refrain from stating. If p is invertible in A, then W(A) is 
isomorphic to A^ with componentwise operations. 

The projection W^(^) of W(v4) to the first £ > 1 coordinates is a ring with the 
same rules for addition and multiplication as for W(A), which is called the ring of 
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Witt vectors of A of length £. We have Wi{A) = A. The rmg epimorphisms 

R: W£+i(A) W£(A), (ao, . . . ,a^) 1-^ (ao, . . . ,af_i) 

are called restriction and ((Wf (A))£>i, R: W^+i(v4) — > We{A)) is a projective 
(inverse) system of rings with limit W{A). The additive group homomorphism 

V: W{A) ^ W{A), (ao, ai, . . . ) ^ (0, ao, ^i, • • • ) 
is called Verschiebung (shift). For £,r > 1, we have exact sequences 

W{A) ^ W(A) ^ Wf(A) ^0, ^ WriA) ^ Wf+^(A) 5^ Wi{A) 0. 

The Verschiebung also induces additive maps V: We{A) We+i{A). 

The Teichmiiller lift of a € A is defined as [a] := (a, 0,0,...) G W(A). The 
image of [a] in Wf(A) is denoted by [a]<£. We have 

[a] - w = (awo, a^Wi, . . . Wi, . . .) 

for all w S W{A). In particular, the map A W{A), a i— >■ [a] is multiplicative, i. e., 
[ab] — [a] [b] for all a,b & A. Every a e W(A) can be written as a = J2^o V[ai]. 

We are only interested in the case where A has characteristic p. The most basic 
example is the prime field A = ¥p, for which W(Fp) is the ring Zp of p-adic integers. 
More generally, the Witt ring W(Fpt) of a finite field Fpt is the ring of integers Zp 

in the unique unramified extension Qp*-* of Qp of degree t |Kob84| . 

Now let A be an Fp-algebra. Then the Frobenius endomorphism F : A ^ A, 
a i-^ aP induces a ring endomorphism 

(1) F:W(A)^W(A), (ao,ai,...) «?:■•■)• 

We have VF = FV = pandaV5 = V(Fa • b) for all a, 6 € W(A). The Frobenius 
further induces endomorphisms on W t{A). An Fp-algebra A is called perfect, if F 
is an automorphism. In this case, the induced endomorphism F on W(A) is an 
automorphism as well. 

Let Up : Q — !■ Z U {oo} denote the p-adic valuation of Q. For a nonzero q (z Q, 
Vp{q) is defined as the unique integer u g Z such that q = p^f for a, 6 G Z\pZ. For 
tuples a e Q'*, s > 1, set Wp(a) := mini<i<s Vp{ai) € Z U {c«}. 

Lemma 10 (Expanding Teichmiiller). Let A — R[a] — i?[a„] be an R-algebra, 
where R is an Vp-algebra, and let f = CiO."' G A, where Ci £ R and cui € N". 

Then, in W£+i(yl), we /lawe the sum over i and {^^ ) = (i^ ^ ^ ) ■' 

(2) [/] = p'^^'^'-'^^ii) ■ Y^-^^^^ F-''^W([cia"i]*i • • • [c,a"=]*=). 

Proof. Note that the RHS w of J2| is a well-defined element of W(^), because 
p-«+"p(i) . (p') e N by Lemma [ssj Vp{i) < £ and p-^pi^) ■ i e W. We have 
[/] = J2i=i['^i^"'] Wi(A), so Lemma [37| implies 

F^/] = [/]^^ = = i'i) ■ ['^i«"^r^ • • • ha-'Y' in W,+i(A). 

\i\=p' 

Since V F = F V = p, we see that this is equal to F^ w. The injectivity of F implies 

[f]=wmWi+i{A). □ 



8 



J. MITTMANN, N. SAXENA, AND P. SCHEIBLECHNER 



2.5. The de Rham-Witt complex. For this section we refer to |I1179| . Let R 
be a ring. Recall that a differential graded R-algehra (R-dga for short) is a graded 
i?-algebra M = 0^>o M'' together with an i?-Unear differential d: W ^ M'^+i 
such that M is graded skew-commutative, i.e., ah ~ {—lyha for a € M'^,b S M'^ 
(in fact, we also assume that a^ = for a E A/^''+^), and d satisfies: do d ~ and 
the graded Leibniz rule d{ab) — b da + {—lYa db for a S M*", b S M. A Z-dga 
is simply called dga. An important example is the i?-dga f^^/^j ■— ®r>o ^a/r 
together with d := 0r>o d^ . 

Definition 11. Fix a prime p. A de Rham Y -pro-complex ( VDR for short) is a 
projective system M, = ((M^)^>i,R: Af^+i — )■ Mi) of dga's together with additive 
homomorphisms (V: MJ — )• Mg_^^)r>o,e>i such that RV = VR and we have 

(a) Ml is an Fp-algebra and M° = (M°) with the restriction and Verschiebung 
maps of Witt rings R: M^^^ ^ and V: M^" M^^^^, 

(b) Y{ujdr]) = (Vw)dV?7 for all w G MJ,?? € M/, 

(c) {Yw)d[a] = Y{[a]P-'^w)dY[a] for all a € M^^w e AfO. 

|I1179| constructs for any Fp-algebra A a functorial de Rham V-pro-complex 
W, ri]4 with We fl^ — We{A), which is called the de Rham-Witt pro-complex of A. 
We have a surjection ^^Wf(A)/ Wj>(f ) ~^ '^i^ai which restricts to the identity on 
We{A) and, for £ = 1, is an isomorphism ^^Wi(A)/f ~ ^A/¥ ~^ ^A- 

Like the Kahler differentials, W, fl'j^ satisfy properties that make it convenient 
to study algebra extensions. 

Lemma 12 (Base change |I1179l Proposition LI. 9. 2]). Let k' /k be an extension of 
perfect fields of characteristic p. Let A he a k-algehra and set A' := k' (g)^ A. Then 
there is a natural Wi{k') -module isomorphism W({k') 'S)We{k) = W^ il^, for 

all£>l and r > 0. 

Lemma 13 (Localization |I1179[ Proposition LI. 11]). Let A he an ¥p-algehra and 
let B — S^^A for some multiplicatively closed set S (Z A. Then there is a natural 
We{B)-module isomorphism Wi{B) ®Wf(A) = W^ for all £ > 1 and 

r > 0. 

Lemma 14 (Separable extension). Let L/K be a finite separable field extension of 
characteristic p . Then there is a natural W i{L) -module isomorphismWe{L)iSiyji{K) 
We = ni for all£>l and r > 0. 

Proof. Proposition 1.1.14 of |I1179| states this for an etale morphism K ^ L, which 
means flat and unramified. A vector space over a field is immediately flat, and a 
finite separable field extension is unramified by definition (see e.g. Mil80 ). □ 



Remark 15. The proofs in [ I1179j show that the isomorphisms of Lemmas [12|- 14 
are in fact isomorphisms of VDR's with appropriately defined VDR-structures. 

According to [111791 Theoreme 1.2.17], the morphism of projective systems of rings 
RF = FR: W,(A) — )■ W,-i{A) uniquely extends to a morphism of projective sys- 
tems of graded algebras F : W, Sl^ W,_i such that F d[a] <^_i_i = [a]^'^^c?[a]<f 
for all a G A, and F d V = c? in W^ Q,\ for all £ > 1. Define the canonical filtration 
as Fil^ Wm ^A — ker ( R""*^ : W,„ We n'^) for £, m > 0. 

Now consider a function field L :— k{Xn) over a perfect field k. The following 
fact, proven in |A.2[ is quite useful for our differential calculations. 
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Lemma 16 (Frobenius kernel). We have ker ( W^+i ^1 ^ Wi ni) C Fil'^ W^+, 0.^ 

2.6. The de Rham-Witt complex of a polynomial ring. Let fc/Fp be an 
algebraic extension and consider the polynomial ring A :— k[x] = k[xn]- In |I1179[ 
§1.2] there is an explicit description of W, il^ in the case k = ¥p. We generalize 



this construction by invoking Lemma 12 (note that k is perfect) 



Denote by K :— Q(W{k)) the quotient field of the Witt ring, and consider the 
rings B := W{k)[x] and C Uj>o -^1=^^ r > 0, we write 17^ ^B/w{k) 

and fl^ := il^^j^. Since the universal derivation d: C ^ satisfies 

d(^x^ ) ^^j/^j ^'^"^ * ^ 0, J e [n], 

every differential form u e can be written uniquely as 

(3) w = ^^c/ • Aje/cflogXj, 

where the sum is over all / e the ci £ C are divisible by {W^^iX^Y ° for 

some s > 0, and dlogXj := dxj/xj. The c/ in ^ are called coordinates of w. A 
form UJ is called integral if all its coordinates have coefficients in W{k). We define 

E*^ :— :— {u! £ | both to and dui are integral}. 

Then, E := ©r>o E*" is a differential graded subalgebra of Qc containing Qb- 
Let F : C — !■ C be the unique Qp-algebra automorphism extending the Frobenius 

of W(fc) defined by ([I]) and sending a;^ to x^ . The map F extends to an 
automorphism F : i7p — of dga's by acting on the coordinates of the differential 
forms (keeping dloga^j fixed), and we define V: 51^ fl^ by V :— pF~^. We have 
dF = pF d and V d — pdV , in particular, E is closed under F and V. 

We define a filtration E = Fil" E D Fil^ E D • • • of differential graded ideals by 

Fil^E'' := V^E''+dV^E''-i for £,r>0, 

and hence obtain a projective system E, of dga's 

Fi \— F I Fil^ E, H : E£-]_i — » E^ . 

Theorem 17 (Explicit forms). The system E, is a VDR, isomorphic to W, fJ^. 



Proof. The case k — ¥p follows from |I1179[ Theoreme L2.5]. Lemma 12 yields 
W,n^ = W,(fc) ®vv(Fp) W, rip as VDR's. In particular, the Verschiebung 
restricts to the Verschiebung of W,{A), so it coincides with the map V defined 
above. □ 

Lemma 18 ( [ I1179t Corollaire 1.2.13]). Multiplication with p in E induces for all 
£ > a well-defined infective map rup : Fi — > E^+i with rup oH — p. 

3. The classical Jacobian criterion 

Consider a polynomial ring k[x] = k[xn]. In this section we characterize the ze- 
roness of the Jacobian differential which, combined with Lemma [8) gives a criterion 
on the Jacobian matrix. The proofs for this section can be found in j |A.3| 

Theorem 19 (Jacobian criterion - abstract). Let f ^ £ k\x\ he polynomials. As- 
sume that k{x) is a separable extension of k{f^). Then, are algebraically inde- 
pendent over k if and only if 3k[x]/kifr) 0. 
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As a consequence of Theorem |4j the separabihty hypothesis of Theorem [19] is 
satisfied in sufficiently large characteristic. 

Lemma 20. Let G k[x] have transcendence degree r and maximal degree S, and 
assume char(fc) = or char(fc) > S'' . Then the extension k{x)/k{f^) is separable. 

4. The Witt-Jacobian criterion 

This we prove in two steps. First, an abstract criterion (zeroness of a differential). 
Second, an explicit criterion (degeneracy of a p-adic polynomial). 

4.1. The Witt-Jacobian differential. 

Definition 21. Let A be an Fp-algebra, S A, and £ > 1. We call V^^i^Aio-r) 
d[ai\<,i/\- ■ ■ /\d[ar\<( G Jl^ the (£-th) Witt-Jacobian differential of m WfJl^. 

Let k be an algebraic extension field of ¥p (thus, k C Fp). 

Lemma 22. Let L/k be a finitely generated field extension and let i > 1. Then 
We r2£ = z/ and only if r > trdegj, (L) . 

Proof. Let s :— trdegj,(L). Since L is finitely generated over a perfect field, it has 
a separating transcendence basis {ai, . . . , a^} C L. This means that L is a finite 
separable extension of K := k{as). Since A := k[as] is isomorphic to a polynomial 
ring over fc, we have = Oiffr>s + lby [2.6 Lemmas 13 and 14 imply 

= iS Wi Q'l^ = iff = 0. □ 

Corollary 23. For an affine k-domain A and £ > 1, il^ — iffr > trdegj,(yl). 

Proof. Apply Lemma [22] to the quotient field of A and use Lemma [13] □ 

Now let A := k[x] = k[xn\ be a polynomial ring over k. 

Lemma 24 (Zeroness). ///,. G A are algebraically dependent, thenWJe^Aifr) — 
for all £> I. 

Proof. Assume that are algebraically dependent and set R := k[f^]. Corol- 



lary 23 implies Jljj = 0, thus WJe,R{fr) = 0- The inclusion RCA induces a 



homomorphism fi^j ~^ fi^, hence WJg^Aifr) =0- ^ 

We extend the inseparable degree to finitely generated field extensions L/K 
by [L : ifjinscp ■— min|[L : /^(i3)]inscp I -B C i is a transcendence basis of L/K^ 
Note that [L : A']i„scp is a power of char(A'), and equals 1 iff i/if is separable. 

Lemma 25 (Non-zeroness). Lf £ A are algebraically independent, then we have 
^^lAfr) 7^ for all I > \ogp[k{x) : k{f^)]inscp- 

Proof. It suffices to consider the case £ = e + 1, where e :~ logp[fc(a;) : fc(/r)]insop- 
By definition of e, there exist f^^+i n] ^ k{x) such that L := k{x) is algebraic over 
K = k{f) :— k{fj^) with [L : Xjinsop = P^- Let i^sep be the separable closure of 
K in L, thus L/Kgcp is purely inseparable. For i G [0,n], define the fields Ki := 
Arsep[xi, . . . hence we have a tower K C Kscp — Kq C Ki C ■ ■ ■ C Kn — L. 
For i G [n], let > be minimal such that G -ftTi-i (e^ exists, since Ki/Ki-i 
is purely inseparable). Set qi := p'^' . By the multiplicativity of field extension 
degrees, we have e = J2^=i^i- 
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Since WJi^a{x) ^ 0, we have ■ WJ£^a{x) — to^ WJi,A(a;) ^ by Lemma 18 
Lemma 13 implies p'^ ■ WJixix) ^ 0. We conclude 

(4) WJtLixf,. ..,<")= • • • • K]"?"-! • WJe^Ux) ^ 0, 

since [a;i]''i~-^ • • • [s^]''""^ is a unit in We{L). 

Now assume for the sake of contradiction that WJtxif) — 0- We want to 
show inductively for j = 0, . . . , n — 1 that the induced map Vl/j : — >■ f2£ 
satisfies 

] A • • • A d{x^l\ A d[aj+i] A • • • A d[a„]) = for all a^+i, . . . , a„ G ii'^. 

To prove this claim for j — 0, we first show that, for R := k[f], the induced map 
: We is zero. By Lemma [T0| every element w € is a Z- 

linear combination of products of elements of the form V'[c/"] and c?V*[c/"] for 
some i & [OJ-1], c e k, and a € N". Wlog., let UJ = V'°[co/"°] • dY''[cif°"] A 
• • • A rfV*"[c„/""]. Let Lj e Wmfi^ be a lift of w for m sufficiently large (say 
TO — 2£). Using FdV = d and Fd[w] = for w G R, we deduce F^oj = 

5 • (i[ci/"^] A ••• A d[c„/""] for some g G Wm_£(i?). By the Leibniz rule, we 
can simplify to F^w = g' ■ d[fi] A ••• A d[/„] for some g' e Wm-iiR)- Since 
WJ£,l(/) = by assumption, we obtain F^ ^'(w) = *(F^ e Fil'^ Wm-e ^l, hence 



^'(w) G Fil Wm by Lemma 16 This shows '^(lu) = 0, so ^' is zero. Lemmas 
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and |14| imply that the map ^'o is zero, proving the claim for j = 0. 

Now let j > 1 and let uj = d[xf] A • • • A d[xf] A d[aj+i] A • • • A d[a„] e 17^ 



with flj+i, . . . , a„ G Kj. Since Kj = Kj^i[xj], we may assume by Lemma 10 that 
iJ = d[xf] A • • • A d[xf] A d V*^+i [cj+ixj^+'] A • • • A d [c„Xj""] with i^+i, . . . , i„ G 
[0, ^ — 1], Cj+i, . . . , c„ G i^j-i, and aj+i, . . . , a„ > 0. Let uj G fi^^. be a hft of 

UJ for m sufficiently large (say to = 2£). As above, we deduce uj — g- dlxf-] A • • • A 
A d[cj+ix'^^^^] A • • • A d[c„x""] for some g G Wm_f(i4rj), and by the Leibniz 
rule, we can write uj = g' ■ d[x'i^^] A ■ ■ ■ A A rf[cj+i] A • • • A d[c„] for some 

g' G W„i~eiKj). Since \ . . . , , Cj4.i,...,c„ G Kj_i, we obtain F^\['j(aj) 
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3 

*j(F^w) G Fil^W„_f by induction, hence *j(w) G Fil^W^fiJ by Lemma 
This shows 'i'j{uj) = 0, finishing the proof of the claim. 

For j = n — 1 and a„ = x^" G i^n-i the claim implies WJe.Lixf^ ^ ■ ■ ■ T^n") — 
which is contradicting Q. Therefore, W3e,L{fn) 0, hence WJe^Lifr) 0. 
Lemma 13 imphes 'WJe,A{fr) 7^ 0- ^ 

is tight in the case fi:=x^' for i G [r]. 



Remark 26. Lemma 
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Theorem 27 (Witt-Jacobian criterion - abstract). Let /,. E A be of degree at most 
5 > I and fix £ > [r log^ 5\ . Then, f ^ are algebraically independent over k if and 
only ifWJf,A{fr)^0. 

Proof. Let f^r+in] C a; be a transcendence basis of k{x)/k{f^). Then [k{x) : 
fc(/.)]insep < iHx) ■■ HfJUcp < [k{x) : fc(/„)] < (5'' by Theorem^ The assertion 
follows from Lemmas [24] and [25l □ 

4.2. The Witt-Jacobian polynomial. We adopt the notations and assump- 



tions of S2.6 In particular, k/¥p is an algebraic extension, A = k[x] — fc[a;„], 
B = W{k)[x], K = Q{W{k)), and C = Ur>o^[^^ 1- F^^caU that E = is a 
subalgebra of fl^j containing fi^, in particular, i? C E". Since k is perfect, we have 
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W{k)/pW{k) = Wi(fc) = k and hence B/pB = A. In the foUowing, we wiU use 
these identifications. 

Lemma 28 (ReaHzing Teichmiiller). Let f E A and let g E B such that f ^ g 
(mod pB). Let e>0 and let r: Wi+i{A) ^ E?+i = EVFil^+^E° be the W(fc)- 
algebra isomorphism from Theorem 17 Then we have T([/]<f-|_i) — (F^^' gY ■ 

Proof. Write g = X]i=i Cia;"S where Ci G W{k) and a; G N". By assumption, we 
have [/] = J2i=i Ciix"'] in Wi(^). By Lemma 37 we obtain 



F'[/] - iff - (ELi = E Ci) ■ ^'[^"^]'^ • • • [^"1^= in W,+i(A). 

As in the proof of Lemma |10[ this imphes 
[/] = E p"^+"''^''(^') • V^-^''^'^) F~''^^^\c\'[x'''Y' ■ ■■c';[x"^Y^) in We+iiA). 

\i\=p' 

Since k is perfect, F is an automorphism of W(fc), so this is weh-defined. Denoting 
rui := CiX"^ € B, and using rV = Vr and r([a;i]) = Xi, we conclude 

r([/])= E P^^+'^^'H"^') V^"""''^F-"''(^'(TOi^ •••m*/) 
|i|=p« 

|i|=p« 

Note that the intermediate expression F^^ g E C need not be an element of E°. □ 

The algebra C is graded in a natural way by G := N[p^^]". The homogeneous 
elements of C of degree /3 £ G are of the form cx^ for some c G K. This grading 
extends to ftc by defining w G $7^ to be homogeneous of degree /3 G G if its 
coordinates in ([3| are. We denote the homogeneous part of w of degree /3 by (w)/3. 

Lemma 29 (Exphcit fihration p79l Proposition L2.12]). Let £ > and let (3 G 
G. £)e/?ne zy(^ + l,/3) := min{max{0,£ + 1 + Vp{/3)},£ + l} G [0,^+1]. T/ien 
(Fil^+iE)^ =p''(^+i-'3)(E)^. 

The following lemma shows how degeneracy is naturally related to ly. A proof is 
given in j |A.4| 

Lemma 30. Let i > and let f E B C . Then f is {£ + l)-degenerate if and 
only if the coefficient of x^ in F^ / is divisible by for all j3 E G. 

Lemma 31 (Zeroness vs. degeneracy). Let ^ > 0, let g^^ E B C E'' be polynomials, 
and define uj d(F"^5i)p' A • • • A d(F"^9,.)p' G E''. Then uj G Fil^+^ E'' if and 
only i/ WJPf+i is {I + l)-degenerate for all I G 

Proof. From the formula dF =pFd p79l (L2.2.1)] we infer 

YU{F^'g^ =YUY-'{gf)=r'dg( =gf~'dg., 

hence u = {gi ■ ■ ■ g^Y dgi A • • • A dgr. A standard computation shows 

dgiA--- Adgr= (Ilje/ ^j) ' det J^, {g^) ■ /\^^jdlog xj, 
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where the sum runs over all / € ('"')• This yields the unique representation 



By Lemmag we have Fil^+i E"- - K) ^ = 0^^^ pK^+i,/3) (e^)^, 

and we conclude 

^eFil^+^E'- ^ V/3eG: G p^^^+i'^ (E'')^ 

^ V/3 e G, / e (}^^) : (F-^ W3P,+,A9r))p e p''^'+'^^^ B 
^ V/ e (["!) : WJP<,+ij(g^) is + l)-degenerate, 
where we used Lemma [30l □ 
Proof of Theorem [7} Using Lemmas [28] and [31] this follows from Theorem [27] □ 

5. Independence testing: Proving Theorem [2] 

In this section, let A = k[x\ be a polynomial ring over an algebraic extension k 
of Fp. For the computational problem of algebraic independence testing, we consider 
k as part of the input, so we may assume that k = Fpc is a finite field. The algorithm 
works with the truncated Witt ring W£+i(Fpt) of a small extension Wpt/k. For 
computational purposes, we will use the fact that Wf+i(Fpt) is isomorphic to the 
Galois ring Ge+i^t of characteristic p^+^ and size p(^+-'^'* (see |Rag69t (3.5)]). 

This ring can be realized as follows. There exists a monic polynomial h e 
Z/(p^+^)[x] of degree t dividing ~^ — 1 in Z/(p^+^)[a;], such that h := h (mod p) 
is irreducible in Fp[a;], and ^ := a; + (h) is a primitive (p* — l)-th root of unity in 
Fp[a;]/(7^). Then we may identify Gi+i,t = Z/{p'^+^)[x]/{h) and F^t = ¥p[x]/(h), 
and ^ := X + (h) is a primitive (p* — l)-th root of unity in Gi+i^t (see the proof 
of ^Wan03l Theorem 14.8]). The ring Gi+i^t has a unique maximal ideal (p) 
and Ge+i^t/{p) == Fp*. Furthermore, G^+i.f is a free Z/(p^+^)-module with ba- 
sis 1,^, . . . so that any a € Fpt can be lifted coordinate-wise to a G G^+i^j 
satisfying a = a (mod p) . To map elements of k to Fpt efficiently, we use |Len91j . 

For detailed proofs of the following two lemmas see §A.5| 

Lemma 32 (Interpolation). Let f £ G£+i_t[z] be a polynomial of degree D < — 1 
and let ^ G G^+i^f be a primitive {p* — l)-th root of unity. Then 

coeff (^^ /) = (p* - l)-i • E to' r'"f{C') for all d e [0, D]. 

This exponentially large sum can be evaluated using a #:P-oracle |Val79j . 

Lemma 33 (^P-oracle). Given Gf+i^t, a primitive (p* — l)-th root of unity ^ e 
G^+i^t, an arithmetic circuit C over Gi^i^t[z] of degree D < p^ ~ 1 and d e [0, D]. 
The coeS{z'^,C) can be computed in FP"^^ (with a single ^P-oracle query). 

Proof of Theorem^ We set up some notation. Let s := size(Cr) be the size of the 
input circuits. Then S :— 2* is an upper bound for their degrees. Set £ := [r logp S\ 
and D := rS^'^^ + 1. The constants of Cr lie in fc = Fp^, which is also given as 
input. Let t > 1 be a multiple of e satisfying p* — 1 > -D". Theorem [l] implies that 
the following procedure decides the algebraic independence of Cr ■ 

(1) Using non-determinism, guess / £ ('"') and a E [0,D — 1]". 
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(2) Determine G^+i^t and ^ as follows. Using non-determinism, guess a monic 
degree-i polynomial h G Z/(p^+^)[.t]. Check that h divides ~^ — 1, h :— h 
(mod p) is irreducible and £, :— x + (h) has order — 1 (for the last test, also 
guess a prime factorization of p* — 1), otherwise reject. Set ^ := x + (/). 

(3) By lifting the constants of C,- from k to Ge+i^t, compute circuits over 
G^_l_i^t[a;] such that = Ci (modp). Furthermore, compute a circuit C for 
WJP',+i,/(C;) overG,+i,tM. 

(4) Compute the univariate circuit C C{z, , . . . , z^" ) over G£4.i,t[z]. The 
term is mapped to z'', where d := X]"=i ctiD^~^ ■ 

(5) Compute c := coeff(z^G') G G^+i,*. If c is divisible by pmin{«p(a),n+i^ then 
reject, otherwise accept. 

In step ([2]), the irreducibility of h can be tested efficiently by checking whether 
gcd(/i, x^ — X ) 1 for i < [t/2\ (see |Wan03[ Theorem 10.1]). For the order test 

verify 7^ 1 for all maximal divisors j of p* — 1 (using its prime factorization) . 

The lifting in step ([3| can be done as described in the beginning of the section. 
To obtain C in polynomial time, we use |BS83j and [Ber84j for computing partial 
derivatives and the determinant, and repeated squaring for the high power. 

We have deg(G) < r5{p^ — 1) + r + r{8 — 1) < rS^^"^ < D, so the Kronecker 
substitution in step Q preserves terms. Since deg2(G') < D" < p* — 1, step ([s]) is 
in FP"^^ by Lemma [33| Altogether we get an NP"^^-algorithm. □ 

6. Identity testing: Proving Theorem [3] 

The aim of this section is to construct an efficiently computable hitting-set for 
poly-degree circuits involving input polynomials of constant transcendence degree 
and small sparsity, which works in any characteristic. It will involve sparse PIT 
techniques and our Witt-Jacobian criterion. We use some lemmas from |A.6[ 

As before, we consider a polynomial ring A = k[x\ over an algebraic extension k 
of Fp. Furthermore, we set R :~ W{k) and B := R[x]. For a prime q and an 
integer a we denote by [aj q the unique integer < b < q such that a = b (mod q) . 
Finally, for a polynomial / we denote by sp(/) its sparsity. 

Lemma 34 (Variable reduction). Let f ^ ^ A be polynomials of sparsity at most s > 
1 and degree at most 5 >\. Assume that f^, x\j.^i n\ are algebraically independent. 
Let D r5''+^ + 1 and let S C k be of size \S\ = {25rs)^''^ ' \l0g2 D^D. 

Then there exist c E S and a prime 2 < q < n^(2(5rs)^'' '*[log2-D]^ such that 
fi(xr,c), . . . , fr{xr,c) G k[xr\ are algebraically independent over k, where c = 
(cL^°J^cL^'J^...,cL^""'■"'J') G fc"-'-. 

Proof. Let gi E B he obtained from fi by lifting each coefficient, so that gi is 
s-sparse and fi = gi (modpB). Theorem [T] implies that with £ := [rlogp^J the 
polynomial g :— WJP^+ijnj (g^, a;[i._|_i^„]) G -B is not (^ -I- l)-degenerate. We have 

5 = (51 • • - ffr • Xr+1 ■ ■ ■ XnY''''^{xi • • • X„) • dct J^^; (Sr ' ^[r+l,n] ) 
^{Xr+l---XnY ■ {91 ■ ■ ■ grY ~ {xi ■ ■ ■ Xr) ■ det Jx^{g ^) , 

since the Jacobian matrix J^ccidri ^[r+i,n]) is block-triangular with the lower right 
block being the (n — r) x (n — r) identity matrix. Define 

9' (51 • ■■grY'~^ixi ---Xr) ■ detj^^{g^) G B. 
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Then g — {xr+i ■ ■ ■ Xn)^ g' , and g' is not {£+ l)-degenerate by Lemma 44 Further- 
more, we have deg{g') < rS{p^ 1) + r + r{S — 1) < r5'"+^ < D and 



By Lemma 42, there exist c G S and a prime q < n'^{26rs) *[log2 D~\^ such that 
h := g'{xr, c!) E R[xr] is not {£ + l)-degenerate, where 

and c' E i?"^'" is the componentwise Uft of c to R. Since h = WJPg^i ^r] {9i{xr, c'), 
. . . , gr{xr, c')) and fi{Xr, c) = gi{Xr, c') (mod pB) for ah i E [r], Theoremjljimphes 
that fi(xr, c), . . . , fr{xr; c) are algebraicaUy independent over k. □ 

For an index set / = {ii < • • • < v} E (^"') denote its complement by [n]\I = 
{ir+i < ■ ■ ■ < in} ■ Define the map tt/ : k" ^ k"", (ai, . . . , a„) i— (a^j , . . . , ai,J. We 
now restate, in more detail, and prove Theorem [3] 

Theorem 35 (Hitting-set). Let /„j E A be s-sparse, of degree at most S, having 
transcendence degree at most r, and assume s,6,r > 1. Let C E fc[y„J such that 
the degree ofC{f^) is bounded by d. Define the subset 

H {^,(b,cL^''J^cL^^J^...,cL^— ^J') \ I e {^';:^) , b E S^, c E S„ q E [N]} 

of k^ , where 81,82 ^ k are arbitrary subsets of size d+1 and Ti^{2Srs)^^ respec- 
tively, D := rS''+^ + 1, and N := n2(2^rs)^'~'^ 

If C(/m) ^ then there exists a E U such that {C{f^)){a) 7^ 0. The set U 
can be constructed in poly((nd)^, {SrsY '*)-time. 

Proof. We may assume that are algebraically independent over k There exists 
I = {ii < ■ ■ ■ < ir\ C [n] with complement [n] \ I = {v+i < • • • < in} such 
that a;[n]\/ are algebraically independent. By the definition of %, we may 



assume that / = [r]. By Lemma 34 there exist c E 82 and a prime q E [N] 



such that fi{xr, c), . . . , fr{Xr,c) E k[ algebraically indepen dent , where c = 

(cL^°J«,cL-°'J',...,cL^""''"'J'') E k''-r IfC(/„) ^ 0, then Lemmaliilimplies that 
(C(/„i)) i^ri c) 7^ 0. From Lemma 46 we obtain b E 81 such that {C{f„^)) (6, c) ^ 
0. Thus, a := (b, c) E H satisficsthe first assertion. The last one is clear by 
construction. □ 

7. Discussion 

In this paper we generalized the Jacobian criterion for algebraic independence 
to any characteristic. The new criterion raises several questions. The most impor- 
tant one from the computational point of view: Can the degeneracy condition in 
Theorem [l] be efficiently tested? The hardness result for the general degeneracy 
problem shows that an affirmative answer to that question must exploit the special 
structure of WJP. Anyhow, for constant or logarithmic p an efficient algorithm for 
this problem is conceivable. 

In Sj6] we used the explicit Witt-Jacobian criterion to construct faithful homomor- 
phisms which are useful for testing polynomial identities. However, the complexity 
of this method is exponential in the sparsity of the given polynomials. Can we 
exploit the special form of the WJP to improve the complexity bound? Or, can 
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we prove a criterion involving only the Jacobian polynomial (which in this case is 



sparse)? (See an attempt in Theorem 36 ) 
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Appendix A. Missing theorems, lemmas and proofs 

In this appendix we present statements and proofs that did not fit in the main 
part due to space constraints. 

A.l. Degeneracy of the p-adic Jacobian. 

Theorem 36 (Necessity). Let fj.^A and E B such that Vi G [r],fi = gi 
(modpB). // are algebraically dependent, then for any r variables xj, I 

the p-adic polynomial J^jiOj.) := {Yijei^j) '^^^•JxAOr) degenerate. The 



convers 



e does not hold. 



Proof. Fix £ G N such that p^ is at least the degree of Jxj{gr). Consider the 
differential form 7 := dY^[fi]<i+i A • • • A dY^[fr]<e+i e W^+i 17^. 

Assume that fi, . . . , fr are algebraically dependent and set R := k[fi, . . . , fr]. 



Corollary 23 implies W^+i fi^j = 0, thus 7 vanishes in W^+i fijj- The inclusion R C 
A induces a homomorphism W^+i fi^ — ^ W^+i f2^, hence 7 vanishes in W^+i fi^ 
itself. 

As in the proof of Lemma [isj we first make Y^[f]<e-\-i explicit. Let g <E B 
such that f = g (mod pS), and write g = X]i=i Ci^c^S where Ci € W(/c) and 
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ai g N" for i e [s]. Note that {Y[f]<t+i) = p^[f]<i+i. Also, for w := 



V (ELi c^{x°''\) e W<;+i(A) we have Y\w) = f Ci[a?"']. Smee by assump- 
tion ([/] - ELicJa;"']) e VW(A), we get /{[/] - ELiC.[^"']) e V^+i W(A). 
This proves F^(V^[/]<f+i) = Y\w). The injectivity of implies V^[/]<£+i = 
Finally, we can apply r: W^+i(v4) ^ E°+i to get: r(V^[/]<f+i) = r(w) = V^(.g). 

Thus, we have the explicit condition 7' :— t{^) = dY^{gi) A ■ ■ ■ A dY^[gr) G 
Fil^+^E''. Now we continue to calculate 7' much like in Lemma 



31 



The formula 

d¥ =pFd (see p79l (1.2.2.1)]) implies d = FdpF"^ = FdY, heme d = F^dY'^. 
We infer F^ d{V^gi) = dgi, hence F^ 7' = dgi A ■ ■ ■ A dgr- Furthermore, 

dgi A • • • A dgr = {Ujei ^j) ' ^et J^j (g,.) • Ajei^^'^S 

where the sum runs over all / € ('"')■ This yields 

7' = -^^^ ^9r) ■ Ajei ^ log , 

and this representation is unique. 



As in the proof of Lemma 31 we conclude 

7'eFil^+iE'' ^ V;9eG: e p-'^'+'-^^E'-) ^ 

<=^\f/3eG,le (W) : (F-^ J., (g,))^ e F"^ S 

V/ e ([';!) : Jx,(gJ is (^ + l)-degenerate, 

where we used Lemma [30] Since our £ is large enough, this is finally equivalent to 
the degeneracy of Jxi^g,.)- This finishes the proof of one direction. 

The converse is false, because if we fix fi := and /2 := Xj, then Jx2{x\, x^) = 
p^x^x^- This is clearly degenerate, but /i,/2 are algebraically independent. □ 

A. 2. Proofs for Section [2], For a polynomial / in some polynomial ring k[xn] 
and a vector w S N", the weighted- degree is defined as 

n 

max{^u;,e, | e e N", coeff(a;'=, /) 7^ O}. 

i=l 

For the following proof we need to define a map : k[x\ k[x\ that extracts the 
highest weighted- degree part. I.e. for / e k[x\ of weighted-degree (5, Hwif) is the 
sum of the weighted-degree-^ terms in /. E.g. 3)(2x^ + 3x2) = 3x2. Note that 
A'«,(/) =Oiff / = 0. 

Theorem [4] (restated). Let k be afield, /„ G /c[a;] 6e algebraically independent, 
and set 5i := deg(/i) for i G [n]. Then [fc(a;„) : k{fj^)] < 5i ■ ■ ■ 6n. 

Proof. Define for each i G [n] the homogenization gi :— z^' ■ fi{x/z) G k[z,x] of 
with respect to degree Si. 

Firstly, are algebraically independent over k. Otherwise, there is an ir- 

reducible polynomial H G fc[y[o,„]] such that H{z,g^) = 0. Evaluation at z = 1 
yields H{1, /„) = 0. The algebraic independence of /„ implies H{1, y„) — 0, hence 
{yo — l)l^^(2/[o,n]) by the Gauss Lemma. This contradicts the irreducibihty of H. 

Thus, d' :— [k{z,Xn) : fc(2;,g„)] is finite. We will now compare it with [fc(a;„) : 
fc(/„)] —: d. Denote the vector Sp&C6S k(^Z^ »^n) 

over k{z,g^) by V, and k{xn) 
over k{f^) by V. Each of these vector spaces admits a finite basis consisting of 
monomials in a;„ only. 
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Suppose S — {x"\a e /}, for some / C N", is a basis of V. Assume that 

with some ha € fc[y„]- By homogenizing each term in this equation with respect to 
the same sufficiently large degree, we obtain h'^ G fc[y[o,n]] such that 

Since the a;" are linearly independent over k^z^g^^), we conclude h'a{z,g.^) = 0, 
hence = for all a. Thus, d! < d. 

Suppose 5* = {a;" I a S /}, for / C N", is a basis of V. If they are linearly 
dependent in V, then there exist h^ € ^[y[o.n]] such that 

(5) ^;i„(z,g„).a^" = 

is a nontrivial equation. Let 1 := e N"+^, w := {l,dn) and h'^ := 

t^w{ha) G fc[2/[o,n]]- Applying /^i on (j5| we get for some nonempty J C / a nontrivial 
equation: 

Since is homogeneous and nonzero, it cannot be divisible by (2 — 1). Thus, 

/„) ^ and we get a nontrivial equation in V: 

aeJ 

This contradicts the choice of /. Hence, d < d' . 

Finally, d — d' and from jKem96[ Corollary 1.8] we know d' < 5i ■ ■ ■ 5n- Q 

Now we use the notation of 92.41 



Lemma 37 (p-th powering). Let A he an ¥p-algebra and let a, 6 G W{A) such that 
a- be V W(A). Then a^' - h^' e V^+^ W(A) for all ^ > 0. 



Proof. We use induction on £, where the base case ^ = holds by assumption. Now 
let £ > 1. By induction hypothesis, there is c e W(yl) such that a'^ = V +c. 
Using VF = p and p^^{f) G N for i e [p - 1], we conclude - = [W ^ + 
_ bP' - cP + P"' (!) VF(6p"Hp-^)cO e V^+i W(^). □ 

Lemma 38 (Multinomials |Sin80[ Theorem 32]). Let l,s>l and let a eW such 
that \a\ = . Then p^~'"p^°'') divides the multinomial coefficient (^) := (^^ ^ ^ )■ 



Now we use the notation of ^ 2.5 and consider a function field L := k{xn) over a 
perfect field k. 



Lemma 
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(restated). We have ker ( Wi+, f7£ ^ 17£) C Fil^ We+r 



Proof Let co £ W£+, ni with F* w = 0. Applying : Wefll Wi+i ftl and 
noting that V' F' — p\ we conclude that = 0. Proposition L3.4 of [11179] 
implies u £ Fif W£+,, fi£ . □ 
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A.3. Proofs for Section H 

Theorem 19 (restated). Let j £ k[x] be polynomials. Assume that k{x) is a 



separable extension ofk{f^). Then, are algebraically independent over k ij and 
only if Jk[x]/k{fr) ^ 0. 

Proof. Let be algebraically independent over k. Since k{x) is separable over 
k{fr)^ we can extend our system to a separating transcendence basis of k{x) 
over k. Since fc[/„] is isomorphic to a polynomial ring, we have J/c[/„]/fc(/„) 7^ 0. 
Lemmas [6] and |9] imply Jk[x]/k{f„) ^ 0> thus Jk[x]/k{fr) 0- 

Now let fj. DC algebraically dependent over k. The polynomials remain de- 
pendent over the algebraic closure L := k, which is perfect. Hence, L{f^) is 
separable over L, and |Eis95[ Corollary 16.17 a] implies r > tTdegi^{L{f^)) — 
dim^(^^-) yi^. Thus dfi, . . . ,dfr are linearly dependent, so i Li^f ^) / L(.f r) — 
implying iL[f^\/L{fr) = by Lemma [6j The inclusion L[f^] C L[x\ induces 
an L[/^]-module homomorphism yi^ — > ^l[x]/L' hence ^L[x]/L{fr) = 0- 

Lemma [5] implies ^k[x]/k{fr) =0. □ 

Remark 39. Note that without the separability hypothesis algebraic dependence of 
the still implies ^k[x]/k{fr) = 0- 

Lemma 20 (restated). Let /„j G k[x\ have transcendence degree r and maxi- 
mal degree d, and assume that char(fc) = or char(fc) > (5''. Then the extension 
k{x)/k(fj^) is separable. 

Proof. In the case char(/c) = there is nothing to prove, so let char(fc) ^ p > 6^ . 
After renaming polynomials and variables, we may assume that 33[y._|_2 ^i'^ 
algebraically independent over k. We claim that a;[r+i,„] is a separating transcen- 
dence basis of k{x)/k{f^). A transcendence degree argument shows that they 
form a transcendence basis. Hence it suffices to show that Xi is separable over 
K := k{f^,X[r+i_n]) for all i G [r]. By Theorem[4| we have [k{x) : K] < [k{x) : 
k{f,.,X[r+i,n])] < < p. Therefore, the degree or the minimal polynomial of Xi 
over K is < p, thus Xi is indeed separable for all i G [r] . □ 

A. 4. Proofs for Section |4} We use the notation of §4.2| 

(restated). Let£>0 and let f £ B C E° . Then f is (£+1) -degenerate 
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Lemma 

if and only if the coefficient of x^ in F~ / is divisible by p'^^^+^^P) for all j3 £ G. 

Proof. The map defines a bijection between the terms of / and the terms of 
/ mapping ex"" H> ux^ with u ~ F~^(c) and /? ~ p^^a. Since a £ N", we have 
Vp{fi) = Vp{p-'^a) = Vp{a) - £ > -i, thus -h l,/3) = min{£ + Wp(/3),£} + 1 = 
min{i;p(Q!), ^} -|- 1, which implies the claim. □ 

A. 5. Proofs for Section [5} We use the notation of ^ 



Lemma 32 (restated). Let f £ Ge+i,t[z] be a polynomial of degree D < p* — 1 
and let ^ £ G^+i t be a primitive (p* — l)-th root of unity. Then 

coefr(z^ /) = (p* - l)-i • r'^fiCn for all d £ [0, D]. 

Proof. Set m := p^ — 1. Note that m is a unit in G^+i,*, because m ^ (p). It suffices 
to show that Y^^=q ^-J^^ij ^ . fQj. qI\ d,i £ [0, m — 1]. This is clear for d — i, 
so let d ^ i. Then J2T=o^ ^-^^^ij ^ ^m-i ^j{^-d) ^ because f "'^ is an m-th 
root of unity ^ I. □ 
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Lemma 33 (restated). Given Gi+i,t, a primitive (p* — l)-th root of unity ^ G 
G^+i_t, an arithmetic circuit C over G^+i.f [-z] of degree D < ~ 1 and d G [0, D]. 
The coeS{z'^,C) can be computed in FP"^^ (with a single fj^V-oracle query). 

Proof. Set m := p^ ~ 1. As in sjsj we assume that G^+i,t = 
where deg(/i) = and — x + ih). By Lemma 32 we have to compute a sum 
S :— J2iLo O'i with Oi G Gi+i,t. Each summand ai can be computed in polynomial 
time, because C can be efficiently evaluated. Since the number of summands in S 
is exponential, we need the help of a #P-oracle to compute it. 

Each tti can be written as Oi = X]*=o '^i .i'f"' with Cij G Z/(p^+^). Thus, we can 
represent by a tuple q G [0,p^^^ — 1]* of integers, and a representation of S 
can be obtained by computing the componentwise integer sum s = X^i^o 
N :— m ■ p^~^^. Then s, q G [0, — 1]*, so we can encode the tuples s and Ci into 
single integers via the bijection 

i: [0,A^-1]*^ [0,A^*-1], K,...,nt_i)^X*I^n,7VJ-. 

This bijection and its inverse are efficiently computable. Moreover, t is compatible 
with the sum under consideration, i.e. t(s) = X^I^o^ ''('-*)' thus we reduced our 
problem to the summation of integers which are easy to compute. 

To show that l{s) can be computed in ^P, we have to design a non-deterministic 
polynomial-time Turing machine that, given input as above, has exactly l(s) ac- 
cepting computation paths. This can be done as follows. First we branch over all 
integers i G [0,™ — 1]. In each branch i, we (deterministically) compute the integer 
t(ci) and branch again into exactly t(ci) computation paths that all accept. This 
implies that the machine has altogether X^I^o '-(^i) = '^(s) accepting computation 
paths. □ 

We now state here the claims proved by Mengel |Menl2j . Define the problem 
of t-Degen as: Given a univariate arithmetic circuit computing C{x) G Qp[a;], test 
whether G{x) is ^-degenerate. Note that for i = \ this is the same as the identity 
test C{x) = (modp), which can be done in randomized polynomial time (or 
ZPP). The situation drastically changes when £ > 1. 

Theorem 40. |Menl2j For £ > 1, l-Degen is C=P-hard under ZPP -reductions. 

Proof sketch. Denote by ZMC the problem: Given m G N and a univariate arith- 
metic circuit computing G{x) G Q[x], test whether coeS(x"^,C{x)) = 0. By 
|FMM12j ZMC is C=P-hard. The idea is to reduce ZMC to 2-Degen. Randomly 
pick a sufficiently large prime p. Consider the circuit G'{x) :— px^^™ ■ C{x). It can 
be shown that C'{x) is 2-degenerate iff coeff(a;™, G(x)) = 0. □ 

Corollary 41. |Menl2j Let £> 1. If £-Degen is in PH then PH collapses. 

Proof sketch. Classically, we have 

PH C NP#P C NP^=P. 

By the theorem it now follows that 

PHCNP2PP"°°''™CNPNP"°°^". 

Thus, ff ^-Degen G then PH C I],+2- □ 
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A. 6. Proofs for Section [6} We use the notation of f|6) 

Lemma 42 (Using sparsity). Let £ > and let g ^ B be an s-sparse polynomial of 
degree less than D >2 which is not {£ -\- 1) -degenerate. Let S d R be a subset such 
that \S\pR\ = {ns\log2D'])'^D, and let r G [n]. 

Then there exist c G S and a prime q < (ns [log2 D~\ )^ such that g{xr, c) G 
is not {£+ 1) -degenerate, where c := (cL-° J«,cL^ ^"t ■ ■ ,cL-°" J«) £ 

Proof. Write g = J^pewdl^^r with gp E R[x[r+i.n]]- Since g is not {£ + 1)- 
degenerate, there exists a G N" such that the coefficient G i? of x" in g is 
not divisible by pmin{t,p(a)/}+i_ ^f^^^^ ^ ^ (a', a") gW x N""''. Since is the 
coefficient of x"^^.^ in ga', this polynomial cannot be divisible by pn"ii{i'p(").^}+i. 
Our aim is to find c e i?"^*" such that g^' (c) is not divisible by p™in{i'p(").^}+i^ since 
then it is neither by the possibly higher power p™"^{'"pi°' other words, if 

we write ga' = p'^g' , where g' is not divisible by p, we have an instance of PIT over 
the field R/pR ^ k. 

We solve it using a Kronecker substitution^ so consider the univariate polynomial 
h' :— g' (t^ , . . . , t^" ) G R[t] in the new variable t. Since deg g' = deg ga' < 
degg < D, the substitution preserves terms, so h' ^ pR[t]. Furthermore, h' is s- 
sparse and of degree < D". For any q G N, let hq be the polynomial obtained 
from h' by reducing every exponent modulo q. By jBHLVOOl Lemma 13], there are 

< ns log2£' many primes q such that kg G pR[t]. Since the interval [iV^] contains 
at least N primes for N > 2 (this follows e.g. from [RS621 Corollary 1]), there is a 
prime q < (ns[log2 f])^ with hq ^ pR[t]. Since deg(/ig) < qD < (ns [log2 D~\)'^D = 
\S\pR\, there exists c G S with hq{c) ^ pR. □ 

Lemma 43 (p-adic triangle is isosceles). Let a, (3 G . Then Vp{a + /3) > 
mhi{vp(a) , Vp{/3)} , with equality if Vp{a) ^ Vp{P). 

Proof. Let i G [s] such that Vp{a-\-l3) — Vp(ai -'r l3i) . Then Wp(a + /3) = Vp(ai+ (3i) > 
mm{vp{ai),Vp{l3^)} > miii{vp{a),Vp{l3)}. 

Now assume Vp{a) ^ Wp(/3), say Vp{a) < Vp{l3). Let i G [s] such that Vp{a) — 
Vp(ai). Then Vp{ai) < Vp{f3i), therefore we obtain Vp{a + /?) < Vp{ai + /?,;) — 
uim{vp{ai),Vp{l3i)} = Vp{ai) = Vp{a) ^ min{vp{a) , Vp{(5)} < Vp{a + jS). □ 

Lemma 44. Let £ > 0, let g G B and let a G N" with Vp{a) > £. Then g is 
{£ + \)-degenerate if and only if x" ■ g is {£ + X)- degenerate. 

Proof. It suffices to show that min{i;p(/3), ^} = min{wp(Q; + for all /3 G N". 

But the assumption implies that min{t'p(/?), ^} — min{i;p(Q;), Wp(/3), ^}, which is 

< min{up(Q; + /3), by Lemma 43 with equality, if Wp(a) 7^ fp(/3). If Up(a) = VpiP), 
then min{t;p(/3), £} = min{up(aj!~£} = ^ > mm{vp{a -\- /3),£}. □ 

Let e ^ be polynomials and let (p: k[x] — >■ k[xr] be a fc- algebra homomor- 
phism. We say that Lp is faithful to if trdegfe(/„) = trdegj.(v3(/„)). 

Lemma 45 (Faithful is useful [BMSlli Theorem 11]). Let ip: A ^ k[xr] be a 
k-algebra homomorphism and /„j G A. Then, Lp is faithful to /,„ iff p\k[f ] is 
injective. 

Lemma 46. |Sch80[ Corollary 1] Let nonzero f G k[Xr], and S C k with \S\ > 
deg/. Then there exists b G such that /(b) ^ 0. 
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